org.xwiki.rendering:xwiki-rendering-syntax-xdomxmlcurrent (5.0.2), org.xwiki.rendering:xwiki-rendering-test (5.0.2) potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (5.0.2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-syntax-xdomxmlcurrent 5.0.2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (5.3-milestone-1), org.xwiki.rendering:xwiki-rendering-standalone (5.3-milestone-1) +8 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (5.3-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.3-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.3-milestone-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.10.13), org.xwiki.rendering:xwiki-rendering-standalone (11.10.13) +8 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (11.10.13)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.10.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.10.13 -...

org.xwiki.rendering:xwiki-rendering-syntax-xdomxmlcurrent (5.1-rc-1), org.xwiki.rendering:xwiki-rendering-test (5.1-rc-1) potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (5.1-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.1-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-syntax-xdomxmlcurrent 5.1-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.3-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (11.3-rc-1) +8 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (11.3-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.3-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.3-rc-1 -...

org.xwiki.rendering:xwiki-rendering-syntax-xdomxmlcurrent (5.0), org.xwiki.rendering:xwiki-rendering-test (5.0) potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (5.0)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-syntax-xdomxmlcurrent 5.0 -...

org.xwiki.rendering:xwiki-rendering-syntax-xdomxmlcurrent (5.0.3), org.xwiki.rendering:xwiki-rendering-test (5.0.3) potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (5.0.3)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-syntax-xdomxmlcurrent 5.0.3 -...

org.xwiki.rendering:xwiki-rendering-syntax-xdomxmlcurrent (5.0-milestone-1), org.xwiki.rendering:xwiki-rendering-test (5.0-milestone-1) potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (5.0-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.0-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-syntax-xdomxmlcurrent 5.0-milestone...

org.xwiki.rendering:xwiki-rendering-syntax-xdomxmlcurrent (5.1-milestone-2), org.xwiki.rendering:xwiki-rendering-test (5.1-milestone-2) potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (5.1-milestone-2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.1-milestone-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-syntax-xdomxmlcurrent 5.1-milestone...

org.xwiki.rendering:xwiki-rendering-syntax-xdomxmlcurrent (5.0-rc-1), org.xwiki.rendering:xwiki-rendering-test (5.0-rc-1) potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (5.0-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.0-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-syntax-xdomxmlcurrent 5.0-rc-1 -...

org.xwiki.rendering:xwiki-rendering-syntax-xdomxmlcurrent (5.0.1), org.xwiki.rendering:xwiki-rendering-test (5.0.1) potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (5.0.1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-syntax-xdomxmlcurrent 5.0.1 -...

org.xwiki.rendering:xwiki-rendering-syntax-xdomxmlcurrent (5.1-milestone-1), org.xwiki.rendering:xwiki-rendering-test (5.1-milestone-1) potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (5.1-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.1-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-syntax-xdomxmlcurrent 5.1-milestone...

CVE-2025-40307

In the Linux kernel, the following vulnerability has been resolved: exfat: validate cluster allocation bits of the allocation bitmap syzbot created an exfat image with cluster bits not set for the allocation bitmap. exfat-fs reads and uses the allocation bitmap without checking this. The problem ...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55...

SUSE CVE-2023-53857

In the Linux kernel, the following vulnerability has been resolved: bpf: bpfskstorage: Fix invalid wait context lockdep report './testprogs -t testlocalstorage' reported a splat: 27.137569 ============================= 27.138122 BUG: Invalid wait context 27.138650 6.5.0-03980-gd11ae1b16b0a 247...

CVE-2025-65823

The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test network it was developed on. If an attacker retrieved this, and found the physical location of the Wi-Fi network, they could gain unauthorized access to the Wi-Fi network of the vendor...

PT-2025-50508

BrightSign Digital Signage Diagnostic Web Server 8.2.26 and less contains an unauthenticated server-side request forgery vulnerability in the 'url' GET parameter of the Download Speed Test service. Attackers can specify external domains to bypass firewalls and perform network enumeration by forci...

BrightSign Digital Signage Diagnostic Web Server code-related vulnerabilities

BrightSign Digital Signage Diagnostic Web Server is a troubleshooting and configuration tool from BrightSign USA. A code issue vulnerability exists in BrightSign Digital Signage Diagnostic Web Server version 8.2.26 and earlier, which stems from a server-side request forgery in the url parameter o...

CVE-2025-65822

The ESP32 system on a chip SoC that powers the Meatmeet Pro was found to have JTAG enabled. By leaving JTAG enabled on an ESP32 in a commercial product an attacker with physical access to the device can connect over this port and reflash the device's firmware with malicious code which will be...

CVE-2020-36884: Server-Side Request Forgery (SSRF)

BrightSign Digital Signage Diagnostic Web Server 8.2.26 and less contains an unauthenticated server-side request forgery vulnerability in the 'url' GET parameter of the Download Speed Test service. Attackers can specify external domains to bypass firewalls and perform network enumeration by forci...